riverbankcms 0.28.0 → 0.29.0

package/dist/{eventUpsertInputSchema-COwkcsq7.mjs → eventUpsertInputSchema-DEN6k1oM.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { _ as normalizeLinkValue, a as classifySdkEventSchedule, g as linkSchema, i as sdkEventUpsertOptionalFieldSchemas, n as sdkCourseBookingSettingsSchema, o as classifySdkEventBookingOffer } from "./sdk-event-upsert-BrJvTQ-D.mjs";
-import { f as EVENT_PRESET_VALUES } from "./src-D9-RAM-l.mjs";
+import { _ as normalizeLinkValue, a as classifySdkEventSchedule, g as linkSchema, i as sdkEventUpsertOptionalFieldSchemas, n as sdkCourseBookingSettingsSchema, o as classifySdkEventBookingOffer, s as RESOLVED_INTERNAL_LINK_ENTITY_TYPES } from "./sdk-event-upsert-CXc13KPT.mjs";
+import { m as EVENT_PRESET_VALUES, r as isRecord$4 } from "./src-4CBCWovR.mjs";
 import { z } from "zod";
 
 //#region ../blocks/src/lib/typeGuards.ts
@@ -27,6 +27,359 @@ function asRecord(value) {
 	return isRecord$3(value) ? value : {};
 }
 
+//#endregion
+//#region ../blocks/src/primitives/content/utils/sanitizeHref.ts
+const SAFE_PROTOCOLS = new Set([
+	"http:",
+	"https:",
+	"mailto:",
+	"tel:"
+]);
+const CONTROL_CHARS_PATTERN = /[\u0000-\u001F\u007F]+/g;
+function normalizeInput(value) {
+	return value.replace(CONTROL_CHARS_PATTERN, "").trim();
+}
+function decodeForSchemeCheck(value) {
+	try {
+		return decodeURIComponent(value);
+	} catch {
+		return value;
+	}
+}
+/**
+* Returns a safe href for rich-text anchors, or null when the value should not be rendered.
+*
+* Policy:
+* - Allow absolute URLs with protocols: http, https, mailto, tel.
+* - Allow root-relative ("/path") and hash-only ("#section") links.
+* - Reject protocol-relative URLs ("//example.com"), bare domains ("example.com"),
+*   backslashes, executable schemes (javascript/data/vbscript), malformed URLs, and empty values.
+* - Preserve percent-encoding from the original normalized input.
+*/
+function sanitizeHref(raw) {
+	if (typeof raw !== "string") return null;
+	const normalized = normalizeInput(raw);
+	if (!normalized) return null;
+	if (normalized.includes("\\") || normalized.startsWith("//")) return null;
+	if (normalized.startsWith("/")) return normalized;
+	if (normalized.startsWith("#")) return normalized;
+	return sanitizeAbsoluteHref(normalized);
+}
+function sanitizeAbsoluteHref(normalized) {
+	const decoded = normalizeInput(decodeForSchemeCheck(normalized));
+	const schemeMatch = decoded.match(/^([a-zA-Z][a-zA-Z0-9+.-]*):/);
+	if (!schemeMatch) return null;
+	const rawScheme = schemeMatch[1];
+	if (!rawScheme) return null;
+	const protocol = `${rawScheme.toLowerCase()}:`;
+	if (!SAFE_PROTOCOLS.has(protocol)) return null;
+	try {
+		const parsed = new URL(normalized);
+		if (!SAFE_PROTOCOLS.has(parsed.protocol.toLowerCase())) {
+			return null;
+		}
+	} catch {
+		return null;
+	}
+	return normalized;
+}
+/** Strict authoring admission; existing stored links keep the renderer's normalization. */
+function isSafeRichTextHref(raw) {
+	const decoded = decodeForSchemeCheck(raw);
+	return !/[\u0000-\u001F\u007F\\]/.test(decoded) && !decoded.startsWith("//") && sanitizeHref(raw) === raw;
+}
+
+//#endregion
+//#region ../blocks/src/system/manifest/richTextAuthoring.ts
+const optionalText = z.string().max(2048).nullable().optional();
+const destination = z.string().max(2048).refine(isSafeRichTextHref, "Use http, https, mailto, tel, a single-root-relative path or a #fragment without controls or backslashes");
+const linkAttributes = z.object({
+	href: destination.nullable().optional(),
+	target: z.enum([
+		"_blank",
+		"_self",
+		"_parent",
+		"_top"
+	]).nullable().optional(),
+	rel: optionalText,
+	class: optionalText,
+	kind: z.enum([
+		"internal",
+		"page",
+		"entry",
+		"external",
+		"url"
+	]).nullable().optional(),
+	identifier: optionalText,
+	contentType: optionalText,
+	routeId: optionalText,
+	entityId: optionalText,
+	entityType: z.enum(RESOLVED_INTERNAL_LINK_ENTITY_TYPES).nullable().optional(),
+	title: optionalText,
+	typeLabel: optionalText,
+	contentTypeKey: optionalText,
+	contentTypeName: optionalText,
+	updatedAt: optionalText
+}).strict().refine((attrs) => Boolean(attrs.href) || (attrs.kind === "internal" || attrs.kind === "page" || attrs.kind === "entry") && [attrs.routeId, attrs.identifier].some((value) => typeof value === "string" && value.trim().length > 0), {
+	message: "Links require a safe href, or an internal kind with a routeId or identifier",
+	path: ["href"]
+});
+const noAttributes = z.object({}).strict().optional();
+const markSchema = z.discriminatedUnion("type", [
+	z.object({
+		type: z.literal("bold"),
+		attrs: noAttributes
+	}).strict(),
+	z.object({
+		type: z.literal("italic"),
+		attrs: noAttributes
+	}).strict(),
+	z.object({
+		type: z.literal("strike"),
+		attrs: noAttributes
+	}).strict(),
+	z.object({
+		type: z.literal("code"),
+		attrs: noAttributes
+	}).strict(),
+	z.object({
+		type: z.literal("link"),
+		attrs: linkAttributes
+	}).strict()
+]);
+const marksSchema = z.array(markSchema).max(5).superRefine((marks, ctx) => {
+	if (new Set(marks.map((mark) => mark.type)).size !== marks.length) {
+		ctx.addIssue({
+			code: "custom",
+			message: "Use each mark type at most once"
+		});
+	}
+	if (marks.some((mark) => mark.type === "code") && marks.length !== 1) {
+		ctx.addIssue({
+			code: "custom",
+			message: "Code cannot be combined with other marks"
+		});
+	}
+});
+const textSchema = z.object({
+	type: z.literal("text"),
+	text: z.string().min(1).max(5e4),
+	marks: marksSchema.optional()
+}).strict();
+const hardBreakSchema = z.object({
+	type: z.literal("hardBreak"),
+	attrs: noAttributes
+}).strict();
+const inlineSchema = z.discriminatedUnion("type", [textSchema, hardBreakSchema]);
+const paragraphSchema = z.object({
+	type: z.literal("paragraph"),
+	attrs: noAttributes,
+	content: z.array(inlineSchema).max(1e3).optional()
+}).strict();
+const headingSchema = z.object({
+	type: z.literal("heading"),
+	attrs: z.object({ level: z.union([
+		z.literal(1),
+		z.literal(2),
+		z.literal(3),
+		z.literal(4),
+		z.literal(5)
+	]) }).strict(),
+	content: z.array(inlineSchema).max(1e3).optional()
+}).strict();
+const codeBlockSchema = z.object({
+	type: z.literal("codeBlock"),
+	attrs: z.object({ language: optionalText }).strict().optional(),
+	content: z.array(z.object({
+		type: z.literal("text"),
+		text: z.string().min(1).max(5e4)
+	}).strict()).max(1e3).optional()
+}).strict();
+const imageSchema = z.object({
+	type: z.literal("image"),
+	attrs: z.object({
+		src: destination.nullable().optional(),
+		identifier: optionalText,
+		alt: optionalText,
+		title: optionalText,
+		width: z.number().positive().nullable().optional(),
+		height: z.number().positive().nullable().optional()
+	}).strict()
+}).strict();
+const horizontalRuleSchema = z.object({
+	type: z.literal("horizontalRule"),
+	attrs: noAttributes
+}).strict();
+const blockSchema = z.lazy(() => z.discriminatedUnion("type", [
+	paragraphSchema,
+	headingSchema,
+	codeBlockSchema,
+	imageSchema,
+	horizontalRuleSchema,
+	z.object({
+		type: z.literal("blockquote"),
+		attrs: noAttributes,
+		content: z.array(blockSchema).min(1).max(1e3)
+	}).strict(),
+	z.object({
+		type: z.literal("bulletList"),
+		attrs: noAttributes,
+		content: z.array(listItemSchema).min(1).max(1e3)
+	}).strict(),
+	z.object({
+		type: z.literal("orderedList"),
+		attrs: z.object({
+			start: z.number().int().positive().optional(),
+			type: z.enum([
+				"1",
+				"a",
+				"A",
+				"i",
+				"I"
+			]).nullable().optional()
+		}).strict().optional(),
+		content: z.array(listItemSchema).min(1).max(1e3)
+	}).strict()
+]));
+const listItemSchema = z.lazy(() => z.object({
+	type: z.literal("listItem"),
+	attrs: noAttributes,
+	content: z.tuple([paragraphSchema]).rest(blockSchema)
+}).strict());
+function treeSize(value, depth = 0) {
+	if (depth > 12) return {
+		depth,
+		nodes: 0,
+		text: 0
+	};
+	if (!isRecord$4(value)) return {
+		depth,
+		nodes: 0,
+		text: 0
+	};
+	const nodes = Array.isArray(value.content) ? value.content : [];
+	if (nodes.length > 2e3) return {
+		depth,
+		nodes: 2001,
+		text: 0
+	};
+	return nodes.reduce((total, node) => {
+		if (exceedsBounds(total)) return total;
+		const child = treeSize(node, depth + 1);
+		return {
+			depth: Math.max(total.depth, child.depth),
+			nodes: total.nodes + child.nodes,
+			text: total.text + child.text
+		};
+	}, {
+		depth,
+		nodes: depth === 0 ? 0 : 1,
+		text: typeof value.text === "string" ? value.text.length : 0
+	});
+}
+function exceedsBounds(size) {
+	return size.depth > 12 || size.nodes > 2e3 || size.text > 1e5;
+}
+/** Closed authoring contract for generated content. Stored legacy documents keep their existing reader. */
+const RichTextAuthoringDocSchema = z.preprocess((value, ctx) => {
+	if (exceedsBounds(treeSize(value))) {
+		ctx.addIssue({
+			code: "custom",
+			message: "Rich text must have at most 12 levels, 2000 nodes and 100000 text characters"
+		});
+		return z.NEVER;
+	}
+	return value;
+}, z.object({
+	type: z.literal("doc"),
+	content: z.array(blockSchema).max(1e3)
+}).strict());
+const inlineNodes = [
+	"paragraph",
+	"text",
+	"hardBreak"
+];
+const inlineMarks = [
+	"bold",
+	"italic",
+	"strike",
+	"code",
+	"link"
+];
+const fullCapabilities = {
+	nodes: [
+		...inlineNodes,
+		"heading",
+		"blockquote",
+		"bulletList",
+		"orderedList",
+		"listItem",
+		"codeBlock",
+		"horizontalRule",
+		"image"
+	],
+	marks: inlineMarks,
+	headingLevels: [
+		1,
+		2,
+		3,
+		4,
+		5
+	]
+};
+const inlineCapabilities = {
+	nodes: inlineNodes,
+	marks: inlineMarks,
+	headingLevels: []
+};
+const variantCapabilities = {
+	full: fullCapabilities,
+	media: fullCapabilities,
+	inline: inlineCapabilities,
+	limited: inlineCapabilities,
+	notes: {
+		...inlineCapabilities,
+		nodes: [
+			...inlineNodes,
+			"bulletList",
+			"orderedList",
+			"listItem"
+		]
+	},
+	consent: {
+		...inlineCapabilities,
+		marks: [
+			"bold",
+			"italic",
+			"link"
+		]
+	}
+};
+/** One capability description for editor configuration, admission and model guidance. */
+function richTextVariantCapabilities(variant) {
+	const capabilities = variantCapabilities[variant];
+	return {
+		nodes: [...capabilities.nodes],
+		marks: [...capabilities.marks],
+		headingLevels: [...capabilities.headingLevels]
+	};
+}
+function richTextDocumentSupportsVariant(doc, variant) {
+	const capabilities = richTextVariantCapabilities(variant);
+	const supports = (nodes) => nodes.every((node) => capabilities.nodes.some((type) => type === node.type) && (node.marks ?? []).every((mark) => capabilities.marks.some((type) => type === mark.type)) && (node.type !== "heading" || capabilities.headingLevels.some((level) => level === node.attrs?.level)) && supports(node.content ?? []));
+	return supports(doc.content);
+}
+/** Measured product allowance for whole-document edits; output-token limits remain separately enforced. */
+function richTextEditingBudget(doc) {
+	const serializedBytes = new TextEncoder().encode(JSON.stringify(doc)).length;
+	const nodes = treeSize(doc).nodes;
+	return {
+		kind: serializedBytes <= 8e3 && nodes <= 120 ? "supported" : "too-large",
+		serializedBytes,
+		nodes
+	};
+}
+
 //#endregion
 //#region ../blocks/src/system/manifest/richTextSchema.ts
 /**
@@ -284,17 +637,6 @@ const ROUTE_METADATA_MANIFEST = {
 			required: true,
 			multiline: false
 		},
-		{
-			id: "draftSlug",
-			type: "slug",
-			label: "Page address",
-			description: "The part of the web address after your site's name.",
-			required: true,
-			sourceFieldId: "draftTitle",
-			statusFieldId: "draftStatus",
-			maxLength: 96,
-			ui: { showSlugPreview: true }
-		},
 		{
 			id: "draftMetaTitle",
 			type: "text",
@@ -389,11 +731,7 @@ function getRouteMetadataManifestForContext(context) {
 	if (context.kind === "content") {
 		return getRouteMetadataManifestForType(context.typeKey);
 	}
-	const fields = isHomepagePageRouteSlug(context.routeSlug) ? ROUTE_METADATA_MANIFEST.fields.filter((field) => String(field.id) !== "draftSlug") : ROUTE_METADATA_MANIFEST.fields;
-	return {
-		...ROUTE_METADATA_MANIFEST,
-		fields
-	};
+	return ROUTE_METADATA_MANIFEST;
 }
 function deriveRouteMetadataPresentation(context, options = {}) {
 	const contextManifest = getRouteMetadataManifestForContext(context);
@@ -425,18 +763,7 @@ function deriveRouteMetadataPresentation(context, options = {}) {
 * We still keep `draftTitle` in the underlying manifest for page creation flows, but we omit it from entry editors.
 */
 function omitRouteTitleFieldFromManifest(manifest) {
-	const fields = (manifest.fields ?? []).filter((field) => String(field.id) !== "draftTitle").map((field) => {
-		if (field && typeof field === "object" && "sourceFieldId" in field) {
-			const sourceFieldId = field.sourceFieldId;
-			if (String(sourceFieldId) === "draftTitle") {
-				return {
-					...field,
-					sourceFieldId: undefined
-				};
-			}
-		}
-		return field;
-	});
+	const fields = manifest.fields.filter((field) => field.id !== "draftTitle");
 	return {
 		...manifest,
 		fields
@@ -1484,7 +1811,6 @@ function createMetadataStateFromSnapshot(snapshot) {
 	}
 	const values = {
 		draftTitle: snapshot.draft.title,
-		draftSlug: snapshot.draft.slug,
 		draftMetaTitle: snapshot.route.draftMetaTitle ?? null,
 		draftMetaDescription: snapshot.route.draftMetaDescription ?? null,
 		ogImageId: snapshot.route.ogImageId ?? null
@@ -1507,7 +1833,7 @@ function routeLifecycleContext(snapshot) {
 *
 * Returns null if the entry has never been published.
 */
-function getPublishedMetadataFromSnapshot(snapshot, routing) {
+function getPublishedMetadataFromSnapshot(snapshot, _routing) {
 	if (snapshot.kind === "non-routable") {
 		return null;
 	}
@@ -1517,11 +1843,8 @@ function getPublishedMetadataFromSnapshot(snapshot, routing) {
 	}
 	const publishedTitle = snapshot.published.title ?? snapshot.draft.title;
 	if (!publishedTitle) return null;
-	const publishedPath = snapshot.published.path ?? snapshot.draft.path ?? "";
-	const publishedSlug = routing ? routing.toSlug(publishedPath) : publishedPath ? publishedPath.replace(/^\//, "").replace(/\/$/, "") : "";
 	return {
 		draftTitle: publishedTitle,
-		draftSlug: publishedSlug,
 		draftMetaTitle: snapshot.route.publishedMetaTitle ?? null,
 		draftMetaDescription: snapshot.route.publishedMetaDescription ?? null,
 		ogImageId: snapshot.route.ogImageId ?? null
@@ -3319,7 +3642,8 @@ const DEFAULT_TEMPLATE_DEFINITIONS = {
 					showVenue: true,
 					showMap: true,
 					showOtherDates: true,
-					otherDatesLimit: "5"
+					otherDatesLimit: "5",
+					showCapacity: true
 				}
 			},
 			{
@@ -3424,7 +3748,8 @@ const EVENT_HEADER_TEMPLATE_DEFINITION = {
 			showVenue: true,
 			showMap: true,
 			showOtherDates: true,
-			otherDatesLimit: "5"
+			otherDatesLimit: "5",
+			showCapacity: true
 		}
 	}, ...DEFAULT_TEMPLATE_DEFINITIONS.event.blocks.slice(2)]
 };
@@ -4826,7 +5151,6 @@ const eventRunCommonInputSchema = z.object({
 	bookingOffer: eventBookingOfferInputSchema.optional(),
 	capacity: sdkEventUpsertOptionalFieldSchemas.capacity,
 	venueRef: z.string().nullable().optional(),
-	formRef: z.string().nullable().optional(),
 	settings: z.record(z.string(), z.unknown()).optional(),
 	tags: z.array(z.string()).optional()
 }).strict();
@@ -4859,4 +5183,4 @@ const eventUpsertInputSchema = z.object({
 }));
 
 //#endregion
-export { RichTextDocSchema as a, isRecord$3 as c, findUnfilledSentinels as i, buildEntryScaffold as n, isRichTextDoc as o, validateEntryInstance as r, isObjectRecord as s, eventUpsertInputSchema as t };
+export { RichTextDocSchema as a, isObjectRecord as c, findUnfilledSentinels as i, isRecord$3 as l, buildEntryScaffold as n, isRichTextDoc as o, validateEntryInstance as r, sanitizeHref as s, eventUpsertInputSchema as t };

package/dist/load-config-DkoaFO1t.mjs

@@ -0,0 +1,4 @@
+#!/usr/bin/env node
+import { t as loadConfigFile } from "./load-config-JcidEUjc.mjs";
+
+export { loadConfigFile };

package/dist/{load-config-9DBnYiBm.mjs → load-config-JcidEUjc.mjs}

@@ -7,7 +7,7 @@ import { existsSync as existsSync$1 } from "fs";
 import { fileURLToPath } from "url";
 
 //#region package.json
-var version = "0.28.0";
+var version = "0.29.0";
 var peerDependencies = { "@riverbankcms/sdk": ">=0.157.0 <1.0.0" };
 var package_default = {
 	name: "riverbankcms",
@@ -15,9 +15,18 @@ var package_default = {
 	description: "Riverbank CMS command-line tools for SDK site developers",
 	bin: { "riverbankcms": "dist/cli/index.mjs" },
 	exports: {
-		"./scaffold": "./dist/scaffold/index.mjs",
-		"./testing": "./dist/testing.mjs",
-		"./acceptance/matrix": "./dist/acceptance/matrix.mjs",
+		"./scaffold": {
+			"@riverbankcms/source": "./src/scaffold/index.ts",
+			"default": "./dist/scaffold/index.mjs"
+		},
+		"./testing": {
+			"@riverbankcms/source": "./src/testing.ts",
+			"default": "./dist/testing.mjs"
+		},
+		"./acceptance/matrix": {
+			"@riverbankcms/source": "./src/acceptance/matrix.ts",
+			"default": "./dist/acceptance/matrix.mjs"
+		},
 		"./package.json": "./package.json"
 	},
 	files: ["dist", "README.md"],
@@ -35,7 +44,8 @@ var package_default = {
 		"check:packed-exports": "node scripts/check-packed-exports.mjs",
 		"check:consumer-contract": "node scripts/check-packed-consumer-contract.mjs",
 		"check:packed-account-smoke": "node scripts/check-packed-account-smoke.mjs",
-		"cli": "pnpm --filter @riverbankcms/sdk build && pnpm build && node dist/cli/index.mjs"
+		"cli": "pnpm --filter @riverbankcms/sdk build && pnpm build && node dist/cli/index.mjs",
+		"prepack": "node ../../scripts/package-boundaries/pack-published.mjs refuse"
 	},
 	dependencies: {
 		"commander": "^12.1.0",
@@ -83,7 +93,7 @@ var package_default = {
 //#endregion
 //#region src/version.ts
 /** The package manifest is the source-run fallback; builds inject this value. */
-const CLI_VERSION = typeof "0.28.0" === "string" ? "0.28.0" : version;
+const CLI_VERSION = typeof "0.29.0" === "string" ? "0.29.0" : version;
 /**
 * The CLI's SDK peer range is bundled from the CLI manifest alongside its
 * version. Runtime config loading uses this value as the single compatibility

package/dist/{plan-DU4T2YGq.mjs → plan-BppGb0gS.mjs}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { Tn as parseSiteId, ir as ok, rr as err } from "./src-D9-RAM-l.mjs";
+import { Yn as parseSiteId, or as err, sr as ok } from "./src-4CBCWovR.mjs";
 import { existsSync, readFileSync } from "node:fs";
 import { dirname, isAbsolute, join, parse, relative, resolve, sep } from "node:path";
 import { fileURLToPath } from "node:url";

package/dist/scaffold/index.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import "../src-D9-RAM-l.mjs";
-import { a as prepareScaffoldExecution, d as loadGeneratedPackageRanges, i as preflightScaffoldTargets, l as deriveGeneratedPackageRanges, o as writeScaffoldFiles, r as preflightScaffoldPlan, s as deriveScaffoldLocalManifest, t as deriveScaffoldPlan, u as findPackageManifestPath } from "../plan-DU4T2YGq.mjs";
+import "../src-4CBCWovR.mjs";
+import { a as prepareScaffoldExecution, d as loadGeneratedPackageRanges, i as preflightScaffoldTargets, l as deriveGeneratedPackageRanges, o as writeScaffoldFiles, r as preflightScaffoldPlan, s as deriveScaffoldLocalManifest, t as deriveScaffoldPlan, u as findPackageManifestPath } from "../plan-BppGb0gS.mjs";
 
 export { deriveGeneratedPackageRanges, deriveScaffoldLocalManifest, deriveScaffoldPlan, findPackageManifestPath, loadGeneratedPackageRanges, preflightScaffoldPlan, preflightScaffoldTargets, prepareScaffoldExecution, writeScaffoldFiles };